$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c48768-bdb4-343c-9d5b-d196a743e571.roa File: 32c48768-bdb4-343c-9d5b-d196a743e571.roa (raw, json) Hash identifier: lxnXnFWe31GNvGr9JQIy4rhg8E1sJw/+kFOnvgoEwAY= Subject key identifier: 38:EC:BC:71:E3:75:DB:C3:EA:55:CC:6D:65:8C:18:75:1D:45:91:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849754467AA8211F86C11CC1600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c48768-bdb4-343c-9d5b-d196a743e571.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20940 IP address blocks: 2600:1417:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:67:aa:82:11:f8:6c:11:cc:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=57df68bf-7fa2-4aa3-ba73-1907e8ecc930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:ff:bc:b9:c5:6a:d2:8b:4b:7f:56:12:72: 3f:9c:c6:90:fd:f5:c0:59:b8:41:a1:d5:25:be:d5: 1b:63:04:d1:55:b2:e2:ff:ac:89:d4:c5:bc:cb:99: 3f:7a:fa:76:da:f5:ae:3a:6e:ac:82:57:e1:35:10: 8a:c5:70:f6:3b:56:f7:aa:7d:c3:cf:f9:2d:07:13: eb:4b:9a:54:08:40:4a:76:a8:bd:54:92:d2:20:83: 45:54:7b:f8:d6:c0:1f:f8:a5:93:a5:36:39:3b:74: c8:e6:55:22:ee:87:0d:b5:55:83:5d:cc:38:09:ad: f7:b0:57:be:f7:ad:6c:b2:a5:44:a4:6b:d6:99:62: 73:11:4e:54:4a:39:63:f7:58:53:7b:49:f6:c6:2d: a4:e2:4a:b5:58:6c:80:0a:a7:cc:2a:3f:61:73:25: 0e:ed:04:2b:a1:fa:69:95:90:5c:74:f3:6f:e3:20: 1c:33:15:d5:33:60:0e:a0:c6:e3:09:22:cb:43:1c: 53:81:e0:e0:b5:61:42:0c:3f:48:83:7c:57:b8:9b: 5f:ec:f6:f9:96:09:4b:ce:cf:09:25:59:2c:9d:ed: 84:c3:b0:fe:54:7e:6f:0a:fe:d8:de:89:4b:41:76: 5e:29:72:b7:1b:57:65:10:87:e3:70:65:5b:e6:70: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EC:BC:71:E3:75:DB:C3:EA:55:CC:6D:65:8C:18:75:1D:45:91:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32c48768-bdb4-343c-9d5b-d196a743e571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1417:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e9:0c:4c:10:e6:7a:16:bf:fd:a5:16:21:d7:8b:33:a6:e9: 86:37:43:fb:56:90:18:fc:1a:e1:6f:03:15:2c:72:8c:d4:35: 84:69:8a:79:a2:f2:d5:fe:2c:e4:54:42:7d:4d:c3:5f:ee:b6: 09:33:65:8c:1a:5c:84:e0:b9:ca:12:49:65:52:ce:e5:a3:67: 8d:ff:d0:6d:57:c4:8a:51:58:3b:31:a3:69:d5:4c:e0:aa:c9: 8e:1f:12:c9:d5:97:b0:5c:2c:28:0c:d6:de:b2:85:90:9f:8f: f9:d0:8c:eb:0d:07:c3:d4:06:da:18:fd:32:0e:4b:05:ef:fd: c7:0a:70:08:a9:bf:c1:78:18:8e:cf:32:95:f9:bb:40:23:db: 74:b8:bb:ee:7a:a8:41:84:9f:9d:85:e2:0c:5a:7f:d8:9c:df: 26:39:da:5e:8d:3f:1c:a2:4b:cc:83:35:15:b8:f5:16:b7:98: 34:cf:51:35:0f:16:8e:ee:5a:4e:50:e4:cc:bf:f2:4a:40:28: 4f:60:a3:b0:db:34:95:33:38:bc:5f:c1:d4:d0:67:98:2f:41: 03:ae:b1:40:4a:f0:a7:ed:3b:06:eb:d4:c1:e1:51:7e:af:a5: 47:33:b0:6a:c4:ec:db:0f:98:f2:aa:d1:85:58:ee:ca:db:a6: 7d:70:4b:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl1RGeqghH4bBHMFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NTdkZjY4YmYtN2ZhMi00YWEzLWJhNzMtMTkwN2U4ZWNjOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3z/vLnFatKLS39WEnI/nMaQ/fXAWbhBodUl vtUbYwTRVbLi/6yJ1MW8y5k/evp22vWuOm6sglfhNRCKxXD2O1b3qn3Dz/ktBxPr S5pUCEBKdqi9VJLSIINFVHv41sAf+KWTpTY5O3TI5lUi7ocNtVWDXcw4Ca33sFe+ 961ssqVEpGvWmWJzEU5USjlj91hTe0n2xi2k4kq1WGyACqfMKj9hcyUO7QQrofpp lZBcdPNv4yAcMxXVM2AOoMbjCSLLQxxTgeDgtWFCDD9Ig3xXuJtf7Pb5lglLzs8J JVksne2Ew7D+VH5vCv7Y3olLQXZeKXK3G1dlEIfjcGVb5nD+QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDjsvHHjddvD6lXMbWWMGHUdRZEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJjNDg3NjgtYmRiNC0z NDNjLTlkNWItZDE5NmE3NDNlNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/pDEwQ5noWv/2lFiHXizOm6YY3Q/tWkBj8GuFvAxUscozUNYRp inmi8tX+LORUQn1Nw1/utgkzZYwaXITgucoSSWVSzuWjZ43/0G1XxIpRWDsxo2nV TOCqyY4fEsnVl7BcLCgM1t6yhZCfj/nQjOsNB8PUBtoY/TIOSwXv/ccKcAipv8F4 GI7PMpX5u0Aj23S4u+56qEGEn52F4gxaf9ic3yY52l6NPxyiS8yDNRW49Ra3mDTP UTUPFo7uWk5Q5My/8kpAKE9go7DbNJUzOLxfwdTQZ5gvQQOusUBK8KftOwbr1MHh UX6vpUczsGrE7NsPmPKq0YVY7srbpn1wS4M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:36 2025 by rpki-client